Cross-site scripting vulnerability (XSS) in Nuked-Klan 1.3 beta and earlier allows remote attackers to steal authentication information via cookies by injecting arbitrary HTML or script into op of the (1) Team, (2) News, and (3) Liens modules.
References
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:46
Type | Values Removed | Values Added |
---|---|---|
References | () http://archives.neohapsis.com/archives/bugtraq/2003-02/0276.html - Exploit | |
References | () http://archives.neohapsis.com/archives/bugtraq/2003-03/0275.html - Exploit | |
References | () http://www.iss.net/security_center/static/11420.php - | |
References | () http://www.securityfocus.com/bid/6916 - Exploit |
Information
Published : 2003-12-31 05:00
Updated : 2024-11-20 23:46
NVD link : CVE-2003-1238
Mitre link : CVE-2003-1238
CVE.ORG link : CVE-2003-1238
JSON object : View
Products Affected
nuked-klan
- nuked-klan
CWE